
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: a6hiBy6aFv0Sd9JDa9DBxoqzEvfOYoBL/j7xyGNpIAQ=
Subject key identifier: 60:06:7F:48:FB:46:96:8D:88:3E:5C:C3:3B:1F:94:88:C9:24:9F:C9
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 01A0E0614B38EFD7AA36D20D0F795F8A30E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 1146
Signing time: Sun 27 Sep 2026 01:01:07 +0000
Manifest this update: Sun 27 Sep 2026 01:01:07 +0000
Manifest next update: Mon 28 Sep 2026 01:01:07 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: jagXRQwxNC7V6ayBXDmHebVMgVtYZRw82ctLBQ5rShU=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:4b:38:ef:d7:aa:36:d2:0d:0f:79:5f:8a:30:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Sep 27 01:01:07 2026 GMT
Not After : Sep 28 01:01:07 2026 GMT
Subject: CN=60067f48fb46968d883e5cc33b1f9488c9249fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:03:8c:ec:cb:64:6b:08:1c:be:bb:54:37:
5a:31:ea:d6:8e:36:d1:28:c2:64:56:eb:3b:b7:1f:
03:69:7c:a4:eb:ef:bd:64:de:b4:73:b0:d0:26:f2:
81:a8:07:d5:b7:59:25:76:ca:fb:ac:c4:70:9c:d5:
5d:13:f3:3f:67:93:81:4d:7f:f4:69:94:9e:e3:b4:
95:e6:5f:f6:64:59:d2:61:f6:ea:17:64:88:db:fe:
a9:41:4d:f4:9a:e5:2c:f7:e7:35:17:d6:fd:ae:93:
11:b5:4f:75:11:13:99:62:03:e9:b8:c2:4a:9b:95:
ec:05:dd:51:53:b2:e8:e7:c7:60:eb:9e:57:13:3b:
5e:4f:d4:26:d7:52:00:16:8f:ae:13:d4:38:06:24:
61:1a:c7:f3:63:3f:ce:f3:04:5a:df:7a:a2:39:de:
7d:52:ca:b6:3b:e3:fa:84:a2:48:34:e1:f0:c4:61:
8d:b8:7c:28:e9:80:94:84:92:85:40:f8:12:68:05:
97:98:71:70:5c:4a:58:78:3c:1e:ce:10:1d:e1:a7:
0a:98:b4:84:7d:e1:55:87:1a:04:74:14:28:59:df:
4f:83:0c:3b:b2:28:63:6d:57:1c:44:1a:c2:6f:21:
88:b1:4e:c5:dc:a1:1f:c9:be:ee:91:dc:89:5e:66:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:7F:48:FB:46:96:8D:88:3E:5C:C3:3B:1F:94:88:C9:24:9F:C9
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:63:2f:ea:70:ba:30:5e:82:73:7d:58:74:2e:f9:7b:86:a8:
db:5f:a8:fe:49:95:d7:3e:a6:a7:52:9d:18:30:ac:fd:47:fd:
ea:d1:51:2f:a0:41:dc:bd:bc:87:80:23:64:0c:cf:8b:7e:62:
18:d6:88:e2:7d:4b:b1:cf:7e:01:39:f8:5f:c4:9f:de:d6:a0:
cf:90:37:ea:29:d7:49:cb:8b:58:c8:4c:02:39:b9:5b:84:37:
a2:9c:3a:d0:95:59:2f:4d:fa:9b:47:aa:fb:9b:e9:bd:ef:b9:
f3:f9:f5:b6:01:70:d2:90:89:0f:a5:f7:71:a0:2f:0e:f2:57:
9b:71:91:8b:20:47:f3:a2:e8:88:ab:7a:49:98:f5:52:1c:35:
aa:90:5c:a6:48:5d:0b:68:b9:0b:88:34:af:80:38:29:ca:8d:
4d:5d:6e:63:dd:d1:27:0e:b5:f6:f0:de:c8:e2:39:7a:0e:83:
82:09:0e:0b:4c:52:c1:18:c8:6f:64:96:0e:55:41:4a:b4:91:
e5:02:bb:e7:77:72:65:66:b6:ed:40:ae:56:20:c5:f1:44:67:
91:22:e9:46:3a:37:3c:83:02:79:e2:6d:de:00:cd:8d:bb:84:
24:dd:b5:c4:d9:96:26:81:98:ad:af:b7:d6:92:f4:54:91:8e:
4d:e6:ac:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYUs479eqNtIND3lfijDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk
MTg3YmMwHhcNMjYwOTI3MDEwMTA3WhcNMjYwOTI4MDEwMTA3WjAzMTEwLwYDVQQD
Eyg2MDA2N2Y0OGZiNDY5NjhkODgzZTVjYzMzYjFmOTQ4OGM5MjQ5ZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcMDjOzLZGsIHL67VDdaMerWjjbR
KMJkVus7tx8DaXyk6++9ZN60c7DQJvKBqAfVt1kldsr7rMRwnNVdE/M/Z5OBTX/0
aZSe47SV5l/2ZFnSYfbqF2SI2/6pQU30muUs9+c1F9b9rpMRtU91EROZYgPpuMJK
m5XsBd1RU7Lo58dg655XEzteT9Qm11IAFo+uE9Q4BiRhGsfzYz/O8wRa33qiOd59
Usq2O+P6hKJINOHwxGGNuHwo6YCUhJKFQPgSaAWXmHFwXEpYeDwezhAd4acKmLSE
feFVhxoEdBQoWd9Pgww7sihjbVccRBrCbyGIsU7F3KEfyb7ukdyJXmZHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAGf0j7RpaNiD5cwzsflIjJJJ/JMB8GA1UdIwQY
MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt
ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4
LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWMv6nC6
MF6Cc31YdC75e4ao21+o/kmV1z6mp1KdGDCs/Uf96tFRL6BB3L28h4AjZAzPi35i
GNaI4n1Lsc9+ATn4X8Sf3tagz5A36inXScuLWMhMAjm5W4Q3opw60JVZL036m0eq
+5vpve+58/n1tgFw0pCJD6X3caAvDvJXm3GRiyBH86LoiKt6SZj1Uhw1qpBcpkhd
C2i5C4g0r4A4KcqNTV1uY93RJw619vDeyOI5eg6DggkOC0xSwRjIb2SWDlVBSrSR
5QK753dyZWa27UCuViDF8URnkSLpRjo3PIMCeeJt3gDNjbuEJN21xNmWJoGYra+3
1pL0VJGOTeasMg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:40:57 2026 by rpki-client